Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
File: Zrds5_7vaVb437n4vDoiiGG5ny4.mft (raw, json)
Hash identifier: ul+4h4wForgPN60d4AX1esLY74OYw95Cla1drkNQjmo=
Subject key identifier: 5E:D3:0E:60:B1:12:6E:E7:FC:19:07:52:16:63:B3:48:35:87:68:9E
Authority key identifier: 66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E
Certificate issuer: /CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e
Certificate serial: 019CE3DA1E0BDF5BCCC7477E4E15B06B3F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
Manifest number: 7B
Signing time: Thu 12 Mar 2026 21:00:48 +0000
Manifest this update: Thu 12 Mar 2026 21:00:48 +0000
Manifest next update: Fri 13 Mar 2026 21:00:48 +0000
Files and hashes: 1: DneugekopIxK304C8pLImv6Qcv0.roa (hash: +cGEhJmcpfO0fbmJYvL9sDH0f2ClBmDUFG+o22CeZUs=)
2: Zrds5_7vaVb437n4vDoiiGG5ny4.crl (hash: luLPcWSzhDfSjaftjuW+bjCC4mihd1CqyYckdI4z4Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:1e:0b:df:5b:cc:c7:47:7e:4e:15:b0:6b:3f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e
Validity
Not Before: Mar 12 21:00:48 2026 GMT
Not After : Mar 13 21:00:48 2026 GMT
Subject: CN=5ed30e60b1126ee7fc1907521663b3483587689e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:b4:a1:57:ad:36:e9:9b:38:a5:fe:4a:00:
f9:d9:4e:a2:d5:b0:a3:0f:68:ca:7a:ba:28:eb:44:
7d:41:4a:8d:ed:e3:a7:8e:d4:0b:0a:72:cc:9c:63:
42:a2:cd:66:ad:04:43:db:d2:ed:5f:10:1e:b0:8f:
28:ba:f5:c5:db:e9:96:57:b8:aa:22:d1:f1:b6:b3:
a3:0f:80:8e:2d:57:a3:64:d6:39:b2:4f:1c:4c:d8:
bd:e9:4d:c1:c7:35:c6:ce:ce:87:a2:58:e2:1a:b1:
82:63:5a:90:60:bf:85:a7:67:4b:f4:34:6a:1f:21:
91:1a:0b:8d:27:9e:c7:a6:eb:86:ef:1e:91:7b:41:
85:90:d1:a6:5a:02:c2:d8:fc:e7:a0:30:dc:dc:bc:
bb:53:4b:9d:70:d0:87:24:99:b5:92:fa:52:8f:d3:
19:42:1b:3d:22:52:70:c2:dc:f8:74:1d:b7:e7:2f:
8d:ba:a0:3d:e9:3c:7e:45:cc:e7:50:f2:8d:4f:5a:
f3:b3:33:93:fd:72:82:59:4d:c9:c2:70:8f:7a:09:
ed:12:b3:f7:92:7b:59:43:6e:a0:db:5f:1d:a3:6d:
80:59:7b:02:61:7b:66:56:3e:04:24:6d:7c:1a:da:
00:f0:f3:d2:4e:f6:1b:46:fa:3c:87:a8:8c:2f:15:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D3:0E:60:B1:12:6E:E7:FC:19:07:52:16:63:B3:48:35:87:68:9E
X509v3 Authority Key Identifier:
keyid:66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f4:e8:cc:38:ea:f9:3a:02:b0:e2:b7:24:8e:0b:16:c2:3d:
45:7b:82:7f:42:a5:65:e6:7a:28:be:d7:79:7c:97:6e:13:66:
26:fe:e5:32:10:8c:09:cd:93:80:ea:1c:41:12:e7:c8:98:bf:
e9:bd:75:6d:95:a2:72:eb:90:97:cc:d3:d5:e7:f0:d5:77:77:
b0:9b:53:f0:38:24:23:31:e2:5d:89:a9:70:1e:9c:a9:38:75:
4f:e5:1e:36:ba:38:9c:cc:a6:dc:b6:4d:1e:6c:bd:70:6b:46:
6e:06:21:e0:6e:37:5d:b3:22:bb:9c:a6:2b:6d:29:30:61:94:
c1:ba:e5:b6:eb:6f:a8:ec:76:4b:45:fc:5b:3a:29:cb:6c:02:
64:57:ae:1e:75:ac:b8:f9:a8:f1:6c:ba:52:17:eb:58:8c:48:
28:30:1c:c8:bd:da:b4:be:9d:60:40:9e:f9:15:d4:77:cb:43:
82:9b:58:24:53:66:6f:a7:fa:bd:ff:9f:04:1c:00:1c:cf:4b:
6d:02:53:a8:1c:53:17:75:81:60:8c:8d:db:80:0d:9a:2b:0e:
58:6b:b5:36:e5:99:3a:50:19:52:de:d2:32:ac:56:bb:10:18:
4f:57:87:97:0f:ec:be:b5:f4:94:2e:9b:ff:00:b3:d2:7c:af:
ee:4b:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:54:58 2026 by rpki-client